- To: slug-chat@xxxxxxxxxxx
- Subject: [chat] domain problem
- From: "Marcel Kunath" <kunathma@xxxxxxxxxxxxx>
- Date: Sun Dec 2 10:38:01 2001
Hello,
I own a domain and its DNS record is set up correctly. It's propagated through
the system. The webserver for this domain runs on a firewall but access to it
is open for machines from the net and from the internal network.
Net<---> Firewall machine with webserver <--->internal network
The firewall also runs a DHCP server for the internal network.
My problem is:
Machines on the outside of the firewall can get to my webserver by the use of
the domain name or the IP address. This works correctly.
The firewall box can get to the webserver by use of the domain and IP address.
This works correctly.
Machines on the inside can only get to the webserver by the use of the IP. All
other domains on the web are accessible though (e.g. nytimes.com) for the int
ernal machines. My domain lookup for my domain does not work on my internal bo
xes and I can't track down my problem.
The only log messages I get is in /var/log/messages
using domain:
Dec 2 10:16:51 mail kernel: SuSE-FW-ACCEPTIN=eth1 OUT= MAC=00:e0:06:e7:76:85:
00:a0:0c:c4:82:ef:08:00 SRC=192.168.1.4 DST=192.168.1.1 LEN=60 TOS=0x00 PREC=0
x00 TTL=64 ID=20046 DF PROTO=TCP SPT=782 DPT=968 WINDOW=5840 RES=0x00 SYN URGP
=0 OPT (020405B40402080A00053BC30000000001030300)
using IP:
Dec 2 10:18:07 mail kernel: SuSE-FW-ACCEPTIN=eth1 OUT= MAC=00:e0:06:e7:76:85:
00:a0:0c:c4:82:ef:08:00 SRC=192.168.1.4 DST=192.168.1.1 LEN=60 TOS=0x08 PREC=0
x00 TTL=64 ID=40503 DF PROTO=TCP SPT=32860 DPT=80 WINDOW=5840 RES=0x00 SYN URG
P=0 OPT (020405B40402080A0005599D0000000001030300)
I get a timeout on the browser itself using the domain name.
The same problem applies when I use pine imap setup in my network. The setup
works if I use 192.168.1.1 in pine.conf.fixed but it doesn't work if I use the
domain name of the machine.
The DHCP server config file:
ddns-update-style none;
option domain-name-servers 61.9.192.13, 61.9.192.16, 35.8.2.41, 35.8.2.42, 61.
9.
128.40;
option domain-name "mydomain.com nsw.bigpond.net.au";
option broadcast-address 192.168.1.255;
option subnet-mask 255.255.255.0;
option routers 192.168.1.1;
default-lease-time 3600000;
max-lease-time 7200000;
subnet 192.168.1.0 netmask 255.255.255.0 {
range 192.168.1.2 192.168.1.30;
}
mk
[A[A[A[A[A[A[A[A[3~